CVE lookup

CVE-2026-63267

Pruva has a verified reproduction for CVE-2026-63267: LFI and GET SSRF via calcext:data-mappings and csv provider — document open reads a local file into the sheet and issues an attacker-directed GET. The canonical evidence record is REPRO-2026-00375.

REPRO

REPRO-2026-00375

Package

LibreOffice (The Document Foundation) · vendor

Severity

MEDIUM

Status

published

Open verified reproduction Plain text for agents NVD source